Lookonchain APP

App Store

Security Alert: The ClawHub Marketplace has discovered a total of 1184 malicious skills that may steal SSH keys, encrypt wallets, etc.

2026.02.20 11:12:57

On February 20, Cosmos Yu, founder of SlowMist, shared a security alert. As of now, 1,184 malicious AI skills have been identified on OpenClaw’s ClawHub marketplace. These skills can steal SSH keys, encrypt wallets and browser passwords, and spawn a reverse shell. A single attacker uploaded 677 of these packages. The top-ranked skill contains 9 vulnerabilities and has been downloaded thousands of times. Yu warned users that text is no longer just text—it’s a command. He recommended running AI tools in an isolated environment, as many OpenClaw skills pose potential risks. Additionally, in Web3 security, smart contracts are only one piece of the puzzle; the root cause of breaches is no longer limited to smart contracts. Just days ago, Moonwell suffered a $1.78 million hack, with the vulnerable code co-authored by Claude Opus 4.6.
Relevant content

Bitcoin Short-Term Price Surges Above $67,000

On March 28, Bitcoin briefly topped $67,000, per HTX market data. It’s currently trading at $66,960.38, with a 0.76% hourly gain.

8 minutes ago

Analyst: If Houthi Militia Attack Escalates, Saudi May Be Forced to Cut Output Alongside Other Oil Producers

March 28 — Energy analysts warn renewed Houthi rebel attacks on Red Sea shipping could further roil the oil market, cutting global supplies and pushing up prices. Saudi Arabia has been diverting as much crude as possible from the Persian Gulf to its Red Sea port of Yanbu, where most shipments head to Asia. While this hasn’t fully offset oil stuck unable to transit the Bab el-Mandeb Strait, it has helped cap global price surges. If Houthi attacks make Yanbu too risky for tankers to access, up to millions of barrels of oil per day could be stranded in the Middle East, analysts note. That could force Saudi Arabia to cut production alongside Kuwait and Iraq.

8 minutes ago

Two more LPG tankers heading to India have exited the Persian Gulf through the Strait of Hormuz.

March 28 – Per foreign media reports, two additional Indian-flagged LPG carriers bound for India have departed the Persian Gulf via the Strait of Hormuz. Ship tracking data shows the BW Tyr and BW Elm, fully laden with LPG, were last tracked off the northern tip of the Omani Peninsula. Throughout their voyage, the vessels’ transponders have been transmitting signals confirming Indian ownership and crew — a standard safety protocol. India relies heavily on LPG imports from the Persian Gulf and is currently grappling with a severe shortage of the fuel. (FXStreet)

8 minutes ago

Goliath Ventures Files for Bankruptcy Reorganization After Its Founder Was Previously Arrested for Alleged $328 Million Ponzi Scheme

March 28 — U.S.-based crypto firm Goliath Ventures has filed for Chapter 11 bankruptcy in the Southern District of Florida Bankruptcy Court, per *The Street*. The company is linked to a $3.28 billion Ponzi scheme affecting over 2,000 investors, including $8.74 million in losses for Gregory Wilson and roughly $1.28 million for John Euliano. In early March, plaintiffs also filed a class-action lawsuit against JPMorgan Chase, alleging the bank ignored Goliath Ventures’ suspicious transactions. Separately, former Goliath Ventures CEO Christopher Alexander Delgado was arrested over his alleged role in the scheme, facing wire fraud and money laundering charges. Delgado allegedly lured victims by promising monthly returns from crypto liquidity pool investments, but instead used funds to pay early investors, purchase luxury homes, and fund lavish activities.

8 minutes ago

IDF detects Iran launching another round of missiles at Israel

March 28 — The Israeli Defense Forces (IDF) detected a new round of missile launches from Iran targeting Israel local time on the afternoon of March 28. Air raid sirens blared across multiple central and southern Israeli areas. Meanwhile, Israeli missile interceptions were visible in the skies over Jerusalem. (G10)

8 minutes ago

Goldman Sachs Analyst: Bitcoin Price May Have Hit Cycle Bottom, But Trading Volume or Further Decline

**March 28: Goldman Sachs on Crypto Market Trends** Goldman Sachs analyst James Yaro said in a research report on March 28 that Bitcoin and the crypto market’s decline has roughly hit the historical average peak-to-trough level for this cycle. In recent weeks, Bitcoin and crypto-related stocks have been volatile but have stabilized. However, Yaro warned trading volume could fall further. In a low-volume environment, Bitcoin prices are prone to sharp swings, and any rebound may struggle to hold. He noted a meaningful rebound typically emerges about three months after volume hits a bottom. If volume keeps declining, crypto firms could see 2% lower revenue and 4% lower profit in 2026. Goldman Sachs currently holds "Buy" ratings on Robinhood, Figure Technologies, and Coinbase—each down at least 50% from their all-time highs. Yaro said digital asset-related assets are increasingly attractive entry points. Last month, Goldman Sachs CEO David Solomon revealed at the World Liberty

8 minutes ago